InfoSecBulletin Cybersecurity for mankind
The White Snake malware has been updated to take advantage of a new feature in the latest Google Chrome version. This update lets malware steal CVC codes from credit cards saved in browsers, posing a serious online security threat, according to reports on X.
Critical cPanel, GitLab AI Gateway and Dell CSM Flaws Enable RCE And Admin Hijacking
Nearly 100,000 email addresses exposed in first AI-related data breach in Singapore
Hackers Exploit Zimbra Mail Servers: TeamViewer patched 5 critical flaws
Google Warns of Hackers Actively Exploiting Citrix 0-Day Flaws
CISA Warns Critical MikroTik RouterOS Flaw While Cisco SD-WAN Zero-Day Exploited in Attacks
Apple Zero-Day Exploited: Pentagon Data Breach Reportedly Exposes Sensitive Data of 3 Million People
JadePuffer Agentic AI targets and destroys Azure’s cloud resources
“InfoSecCon-2026: Bangladesh’s Cybersecurity Leaders Unite to Shape a Safer Digital Future”
Microsoft Patches CVSS 10.0 Azure AI Foundry Vulnerability Allowing Privilege Escalation
AWS is unable to restore access to Bahrain, one UAE cloud data zone after war damage
Chrome’s New Feature Draws Attention:
Google Chrome version 129, released on September 17, 2024, added new features for a better user experience.
One such feature is the ability to store CVC codes from credit cards directly within the browser for easier online transactions.
This feature was meant to simplify payments but has unintentionally drawn the attention of cybercriminals and infostealer developers.
White Snake Malware Update:
White Snake has swiftly adapted to this new opportunity. Malware developers have improved their tools to target and extract stored CVC codes from victims’ browsers. This upgrade enables White Snake to collect full credit card information, facilitating fraud and theft for cybercriminals.
White Snake’s use of the new Chrome feature highlights the ongoing struggle between software developers and cybercriminals. Users should be careful when storing sensitive information in browsers and consider using password managers or secure payment platforms instead.
Cybersecurity experts advise users to keep their security software updated and stay alert for any suspicious account activity. Google will fix this vulnerability in future updates, but users should take steps now to protect their financial information.
